Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f4d2d5e9-aaf2-37b7-80ea-c6989e4bbf52.roa
File:                     f4d2d5e9-aaf2-37b7-80ea-c6989e4bbf52.roa (raw, json)
Hash identifier:          Eiiwe7fwHs9vongGHcCGML0D8tv5Y6ujyswp3QMWznE=
Subject key identifier:   65:81:01:E9:5A:94:8C:B7:7F:05:6E:6D:CD:02:09:0C:6E:31:D8:2C
Certificate issuer:       /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial:       010D0C9F4328584EAC6270A5C7EE2BB9D87E3D00
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f4d2d5e9-aaf2-37b7-80ea-c6989e4bbf52.roa
Signing time:             Thu 30 Jul 2026 18:45:54 +0000
ROA not before:           Thu 30 Jul 2026 18:45:54 +0000
ROA not after:            Wed 28 Oct 2026 18:45:54 +0000
asID:                     399970
IP address blocks:        2602:fc3b:ff00:3a0::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:62:70:a5:c7:ee:2b:b9:d8:7e:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
        Validity
            Not Before: Jul 30 18:45:54 2026 GMT
            Not After : Oct 28 18:45:54 2026 GMT
        Subject: CN=f05e5376-c7e9-4f8a-bbab-8300f3b2ba5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f5:03:c1:11:66:d7:ad:46:eb:73:c0:c6:d5:
                    e0:4f:0d:0c:c7:fc:dd:bb:05:cf:50:e8:6b:e6:76:
                    fc:21:c2:d1:ca:af:66:9c:28:29:c4:45:8e:3f:d6:
                    f8:e4:5e:81:e0:b5:7a:bf:42:9e:b4:ac:0e:70:14:
                    a7:a9:d5:5c:92:7d:c7:5d:77:b6:03:f5:6f:ef:bb:
                    0e:14:be:ea:3a:dd:02:2f:08:8f:c8:7d:e6:25:9f:
                    71:c5:c8:66:4c:b9:50:0b:5a:65:46:23:44:bc:1c:
                    3c:f4:52:ec:6f:9e:3f:69:f2:e1:25:83:7d:a1:29:
                    f1:b2:36:4f:60:9b:6d:b2:6d:12:04:f5:ec:0e:49:
                    57:77:bc:06:17:80:a7:6d:02:3d:db:98:03:f4:40:
                    78:e0:d0:78:93:aa:7a:9d:3a:30:06:d3:ed:ac:4d:
                    b3:ce:cb:da:ee:12:cf:95:3b:7d:71:da:47:63:fb:
                    f1:14:d3:fd:b1:c2:35:81:04:d6:2d:9d:a7:e4:b1:
                    74:12:72:3d:4d:be:9b:59:1c:31:86:85:43:64:e7:
                    65:a8:f8:17:2b:ef:b8:6b:11:5a:dc:c3:40:90:ea:
                    2d:be:36:1b:eb:0c:91:de:ac:1f:4d:94:85:6a:e3:
                    23:d3:57:82:4b:59:b7:bc:aa:16:59:31:b2:24:27:
                    15:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:81:01:E9:5A:94:8C:B7:7F:05:6E:6D:CD:02:09:0C:6E:31:D8:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/f4d2d5e9-aaf2-37b7-80ea-c6989e4bbf52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl

            X509v3 Authority Key Identifier:
                keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:ff00:3a0::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ec:a2:aa:ff:04:b0:d1:a2:bb:a5:43:8e:a7:76:bc:20:28:
         49:56:9a:d0:90:eb:d2:77:ba:5c:3e:51:75:e6:78:8f:91:ae:
         04:58:1e:bb:09:1d:26:c6:a0:3e:81:e5:92:eb:92:18:a9:a6:
         24:bf:d1:b3:22:5c:ef:2f:eb:22:49:3f:c7:bd:38:91:03:3d:
         e9:3c:64:58:15:ec:c8:bf:67:2d:c0:1a:7c:10:75:49:2d:d5:
         28:c9:c6:82:75:51:71:dc:5d:ae:99:f9:dd:5f:30:41:f7:98:
         88:f3:63:f9:e1:01:a8:52:bc:4e:23:11:3c:72:da:ff:5f:36:
         8d:4c:1f:f1:b7:2e:91:dc:09:33:50:79:7b:d4:ed:fe:b1:03:
         9e:b7:7f:b8:9e:2d:8a:24:9b:09:e7:3c:a5:83:0a:1b:6c:15:
         92:dc:75:a5:bf:a2:e6:ff:cb:fc:36:e0:93:04:b2:20:c1:64:
         1c:f6:70:85:89:3c:c8:69:b4:6c:c7:eb:24:4b:d9:19:95:f6:
         53:6f:3d:77:48:e7:cf:03:dc:b4:fc:97:0b:55:3e:65:fa:f5:
         01:62:b7:04:e4:20:d6:7b:09:40:20:9b:7f:02:ee:ab:5b:56:
         25:bb:f3:1c:2a:ba:02:54:3a:bd:25:9b:aa:40:e6:ad:b2:29:
         e7:5b:f2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:05 2026 by rpki-client